CVE-2024-9896 BBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameter

🗓️ 02 Nov 2024 07:03:34Reported by WordfenceType

BBP Core plugin for WordPress has Reflected Cross-Site Scripting vulnerability up to version 1.2.

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2024-9896 BBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameter	2 Nov 202407:34	–	cvelist
CVE	CVE-2024-9896	2 Nov 202408:15	–	cve
NVD	CVE-2024-9896	2 Nov 202408:15	–	nvd
Patchstack	WordPress BBP Core - Expand bbPress powered forums with useful features Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)	1 Nov 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 28, 2024 to November 3, 2024)	7 Nov 202414:15	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a329cf0a-8800-470a-9657-452f26112956
plugins	www.plugins.trac.wordpress.org/changeset/3179353/
plugins	www.plugins.trac.wordpress.org/browser/bbp-core/trunk/includes/features/bbpc_attachments/code/front.php
wordpress	www.wordpress.org/plugins/bbp-core/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Nov 2024 07:34Current

6.4Medium risk

Vulners AI Score6.4

CVSS36.1

EPSS0.001

SSVC

CWE-79